$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/5c279b9f-62e5-3859-80b1-76b8ca66a008.roa File: 5c279b9f-62e5-3859-80b1-76b8ca66a008.roa (raw, json) Hash identifier: npSsGNtD4GaFGAhBweGDjNROp1TgTeFNEc+BNBjxNrU= Subject key identifier: 19:D8:AF:CB:17:D4:D1:A6:94:FE:1B:C3:D3:00:BC:2F:8C:A4:7C:25 Certificate issuer: /CN=4182f5c3-1977-4f18-997f-c945eaea051e Certificate serial: 010D0C9F4328584BA39D20B2A54CEC4C0BB90C00 Authority key identifier: DC:48:C3:92:1C:15:6E:3D:5C:18:09:E9:73:CF:F0:29:D6:5B:7D:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/5c279b9f-62e5-3859-80b1-76b8ca66a008.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 18470 IP address blocks: 23.154.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/4182f5c3-1977-4f18-997f-c945eaea051e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/4182f5c3-1977-4f18-997f-c945eaea051e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:20:b2:a5:4c:ec:4c:0b:b9:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4182f5c3-1977-4f18-997f-c945eaea051e Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=41642e0b-1b29-4603-91d6-9662a307b940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:96:28:bc:59:8b:05:66:7e:3e:40:8a:2a:93: ef:1b:bc:68:b9:07:72:26:2a:50:00:54:ec:f0:e9: ba:3d:b4:65:d7:e8:a2:c7:4c:e9:d7:f7:b3:3d:25: 9d:87:06:80:30:62:29:66:45:f8:2b:62:c4:95:de: a0:3f:2a:81:ca:a4:f8:7e:f2:b6:99:33:a0:e2:e5: 46:95:e5:88:86:cc:97:71:48:49:2e:4e:81:ab:74: f2:93:05:dc:de:f7:ef:2a:0d:5d:7b:05:88:93:4c: 70:9d:9a:2a:8b:5e:de:dc:03:e8:58:86:13:51:54: ce:72:e7:d8:24:b0:ac:cd:19:f8:2c:29:33:54:3d: f3:91:29:52:03:c1:35:ee:65:6c:ac:fa:ac:16:8d: fe:81:84:88:55:42:be:35:ab:5c:4d:ad:13:ef:49: 48:41:42:11:dd:23:d4:34:c3:00:c8:53:2d:41:1f: a4:74:3c:9d:ce:29:e2:22:9e:30:c2:ba:ca:cf:7a: f4:8a:32:3f:3e:b9:d1:aa:ca:5e:57:2d:e2:4b:09: 14:d5:2f:11:dd:ee:46:d3:88:ec:04:1f:c8:df:c6: 7e:b5:85:d6:21:90:84:79:35:b6:06:77:9d:ab:2a: b0:a1:ca:ea:82:9f:de:af:2f:d7:0d:5f:c0:02:af: 7f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D8:AF:CB:17:D4:D1:A6:94:FE:1B:C3:D3:00:BC:2F:8C:A4:7C:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/5c279b9f-62e5-3859-80b1-76b8ca66a008.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e/4182f5c3-1977-4f18-997f-c945eaea051e.crl X509v3 Authority Key Identifier: keyid:DC:48:C3:92:1C:15:6E:3D:5C:18:09:E9:73:CF:F0:29:D6:5B:7D:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4182f5c3-1977-4f18-997f-c945eaea051e.cer sbgp-ipAddrBlock: critical IPv4: 23.154.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:80:5e:a1:dc:78:d0:8d:b1:7b:6f:98:65:c7:c3:a3:94:ae: 34:bb:df:bc:f7:5b:9c:0f:e6:90:78:d9:ee:3c:6f:43:d0:0e: dd:83:7c:e7:a7:c3:11:09:37:bd:d0:be:a7:20:3e:ba:28:17: 80:3e:16:34:b0:ed:8a:f0:5c:7d:e2:91:7e:82:8a:b5:69:21: 3e:4d:aa:12:c9:3b:8e:94:9f:38:d0:d2:fe:df:9a:87:de:fc: cf:2a:2b:56:66:a4:b7:93:70:01:c1:a8:70:8d:9e:2a:a5:16: bc:f2:b6:49:0c:34:12:a7:75:f2:86:26:0b:de:74:ac:18:1a: 48:62:99:60:06:71:6f:d3:53:45:48:a1:4e:44:ec:ca:74:84: a3:dd:4c:47:2c:af:ce:a6:51:27:fc:c3:0c:73:78:a1:14:96: 27:03:c8:d9:94:da:ab:de:65:42:e4:37:9d:d4:09:ec:86:06: b5:77:d9:1f:02:a8:9e:fc:13:a0:33:00:3d:7c:af:4d:d8:3b: 3b:b3:67:21:7c:bc:ef:68:bc:f5:8a:84:0e:76:43:6f:c7:dd: a1:e8:cf:c4:86:52:57:48:0b:9b:5e:5c:12:d6:e4:60:d9:a1: 90:f4:cb:3b:d9:aa:8e:a1:4a:a2:14:4b:f0:93:10:24:52:6b: 21:34:c9:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnSCypUzsTAu5DAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDE4MmY1YzMtMTk3Ny00ZjE4LTk5N2YtYzk0NWVhZWEw NTFlMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NDE2NDJlMGItMWIyOS00NjAzLTkxZDYtOTY2MmEzMDdiOTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ZYovFmLBWZ+PkCKKpPvG7xouQdyJipQAFTs 8Om6PbRl1+iix0zp1/ezPSWdhwaAMGIpZkX4K2LEld6gPyqByqT4fvK2mTOg4uVG leWIhsyXcUhJLk6Bq3TykwXc3vfvKg1dewWIk0xwnZoqi17e3APoWIYTUVTOcufY JLCszRn4LCkzVD3zkSlSA8E17mVsrPqsFo3+gYSIVUK+NatcTa0T70lIQUIR3SPU NMMAyFMtQR+kdDydziniIp4wwrrKz3r0ijI/PrnRqspeVy3iSwkU1S8R3e5G04js BB/I38Z+tYXWIZCEeTW2Bnedqyqwocrqgp/ery/XDV/AAq9/6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnYr8sX1NGmlP4bw9MAvC+MpHwlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80MTgy ZjVjMy0xOTc3LTRmMTgtOTk3Zi1jOTQ1ZWFlYTA1MWUvNWMyNzliOWYtNjJlNS0z ODU5LTgwYjEtNzZiOGNhNjZhMDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDE4MmY1YzMtMTk3Ny00ZjE4LTk5 N2YtYzk0NWVhZWEwNTFlLzQxODJmNWMzLTE5NzctNGYxOC05OTdmLWM5NDVlYWVh MDUxZS5jcmwwHwYDVR0jBBgwFoAU3EjDkhwVbj1cGAnpc8/wKdZbfRUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80MTgyZjVjMy0xOTc3LTRmMTgtOTk3Zi1jOTQ1 ZWFlYTA1MWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5ooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKAXqHceNCNsXtvmGXHw6OUrjS737z3W5wP5pB42e48b0PQDt2DfOen wxEJN73QvqcgProoF4A+FjSw7YrwXH3ikX6CirVpIT5NqhLJO46UnzjQ0v7fmofe /M8qK1ZmpLeTcAHBqHCNniqlFrzytkkMNBKndfKGJgvedKwYGkhimWAGcW/TU0VI oU5E7Mp0hKPdTEcsr86mUSf8wwxzeKEUlicDyNmU2qveZULkN53UCeyGBrV32R8C qJ78E6AzAD18r03YOzuzZyF8vO9ovPWKhA52Q2/H3aHoz8SGUldIC5teXBLW5GDZ oZD0yzvZqo6hSqIUS/CTECRSayE0yaQ= -----END CERTIFICATE-----Generated at Wed Nov 5 16:10:40 2025 by rpki-client